PT-2002-1435 · Microsoft · Internet Explorer+1

Published 2002-07-03 · Updated 2018-10-30 · CVE-2002-0372

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Player versions 6.4 and 7.1 Media Player for Windows XP

Description The issue allows remote attackers to bypass Internet Explorer's security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the Internet Explorer cache.

Recommendations For Microsoft Windows Media Player versions 6.4 and 7.1, consider disabling the execution of .wma files until a patch is available. For Media Player for Windows XP, restrict access to the executable .wma media files to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0372

Affected Products

Internet Explorer

Windows Media Player

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-0372 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-032 · Vendor Advisory
• http://securityfocus.com/bid/5107 · Note
• http://iss.net/security_center/static/9420.php · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A281 · Note